Check certificate banner during nebula-cert print (#373)

2021-02-05 15:52:32 -05:00
parent ce9ad37431
commit 454bc8a6bb
2 changed files with 252 additions and 0 deletions
--- a/cert/cert.go
+++ b/cert/cert.go
@ -127,6 +127,9 @@ func UnmarshalNebulaCertificateFromPEM(b []byte) (*NebulaCertificate, []byte, er
 	if p == nil {
 		return nil, r, fmt.Errorf("input did not contain a valid PEM encoded block")
 	}
+	if p.Type != CertBanner {
+		return nil, r, fmt.Errorf("bytes did not contain a proper nebula certificate banner")
+	}
 	nc, err := UnmarshalNebulaCertificate(p.Bytes)
 	return nc, r, err
 }